Lucene search
+L

253 matches found

NVD
NVD
•added 2026/10/12 6:16 a.m.•20 views

CVE-2026-108806

A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysqlquery of the file source/authprocessing.php of the component Forgot Password Handler. Such manipulation of the argument fpemail leads ...

7.5CVSS0.00254EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/12 6:00 a.m.•48 views

CVE-2026-108806 krupalshah EmployeeRecruitmentSystem Forgot Password authprocessing.php mysql_query sql injection

A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysqlquery of the file source/authprocessing.php of the component Forgot Password Handler. Such manipulation of the argument fpemail leads ...

7.5CVSS0.00254EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/12 6:00 a.m.•27 views

CVE-2026-108806

A SQL injection vulnerability exists in the krupalshah EmployeeRecruitmentSystem (up to commit 922ff6d208278282e7c8e36d70d9ae356adec9fe). The flaw is located in the Forgot Password Handler component within the source/authprocessing.php file, specifically affecting the mysql_query function. Manipu...

7.5CVSS6.9AI score0.00254EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/10/12 6:00 a.m.•18 views

CVE-2026-108806 krupalshah EmployeeRecruitmentSystem Forgot Password authprocessing.php mysql_query sql injection

A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysqlquery of the file source/authprocessing.php of the component Forgot Password Handler. Such manipulation of the argument fpemail leads ...

7.5CVSS6.9AI score0.00254EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/12 6:00 a.m.•21 views

EUVD-2026-97245

A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysqlquery of the file source/authprocessing.php of the component Forgot Password Handler. Such manipulation of the argument fpemail leads ...

7.5CVSS6.9AI score0.00254EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/12 12:00 a.m.•20 views

PT-2026-110476

Name of the Vulnerable Software and Affected Versions krupalshah EmployeeRecruitmentSystem versions up to 922ff6d208278282e7c8e36d70d9ae356adec9fe Description A remote SQL injection exists within the Forgot Password Handler component. The issue occurs in the mysql query function located in the...

7.5CVSS7.2AI score0.00254EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/12 12:00 a.m.•17 views

CVE-2026-108806: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysqlquery of the file source/authprocessing.php of the component Forgot Password Handler. Such manipulation of the argument fpemail leads ...

7.5CVSS6.9AI score0.00254EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/06 4:18 a.m.•20 views

CVE-2026-105703

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...

5.8CVSS0.00227EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/06 4:00 a.m.•20 views

EUVD-2026-92938

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...

5.8CVSS5AI score0.00227EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/06 4:00 a.m.•43 views

CVE-2026-105703 PHPGurukul User Registration & Login and User Management System Change Password change-password.php authorization

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...

5.8CVSS0.00227EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/06 4:00 a.m.•36 views

CVE-2026-105703

The PHPGurukul User Registration & Login and User Management System 3.3 is vulnerable to an incorrect authorization flaw within the Change Password Handler component. Specifically, an unknown function in the file loginsystem/admin/change-password.php fails to properly validate the currentpassword...

5.8CVSS5AI score0.00227EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•15 views

CVE-2026-105703: Incorrect Authorization

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...

5.8CVSS5AI score0.00227EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•24 views

PT-2026-106317

A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/change-password.php of the component Change Password Handler. This manipulation of the argument currentpassword causes...

5.8CVSS5AI score0.00227EPSS
SaveExploits0References7
NVD
NVD
•added 2026/10/05 2:16 a.m.•16 views

CVE-2026-105179

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

5.1CVSS0.00124EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/05 1:45 a.m.•26 views

CVE-2026-105179

The SourceCodester Drug Recommendation System 1.0 is affected by a vulnerability in the Password Handler component, specifically within the Admin/add_user.php file. A manipulation of the Password argument leads to the missing encryption of sensitive data . This vulnerability is exploitable via re...

5.1CVSS5.2AI score0.00124EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/10/05 1:45 a.m.•14 views

CVE-2026-105179 SourceCodester Drug Recommendation System Password add_user.php missing encryption

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

5.1CVSS5.2AI score0.00124EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/05 1:45 a.m.•67 views

EUVD-2026-92179

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

5.1CVSS5.2AI score0.00124EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/05 1:45 a.m.•52 views

CVE-2026-105179 SourceCodester Drug Recommendation System Password add_user.php missing encryption

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

5.1CVSS0.00124EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•15 views

CVE-2026-105179: Missing Encryption of Sensitive Data

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/adduser.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

5.1CVSS5.2AI score0.00124EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•21 views

PT-2026-104675

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/add user.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to...

5.1CVSS5.2AI score0.00124EPSS
SaveExploits0References6
Rows per page
Query Builder